CVE-2001-0606: Undefined Security Weakness

Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 VVOS with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service...

iPlanet Directory Server contains multiple vulnerabilities in LDAP handling code

Overview The iPlanet Directory Server contains vulnerabilities that may allow denial-of-service attacks, unauthorized privileged access, or both. These vulnerabilities were revealed using the PROTOS LDAPv3 test suite and are documented in CERT Advisory CA-2001-18. If your site uses this product,...

CVE-2001-1307

Buffer overflows in iPlanet Directory Server 4.1.4 and earlier LDAP allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1308

Format string vulnerabilities in iPlanet Directory Server 4.1.4 and earlier LDAP allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1306

iPlanet Directory Server 4.1.4 and earlier LDAP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-0419

Buffer overflow in shared library ndwfn4.so for iPlanet Web Server iWS 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attackers to execute arbitrary commands via a long HTTP request that is passed to the application server, such as /jsp/...

CVE-2001-0431

Vulnerability in iPlanet Web Server Enterprise Edition 4.x...

CVE-2001-0327

iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header that is returned by the server...

CVE-2001-1368

Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System VVOS 4.0 running HP-UX 11.04 could allow attackers to corrupt data...

CVE-2001-0252

iPlanet formerly Netscape Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" dot dot sequences...

CVE-2001-0431

Technical details for CVE-2001-0431 are not publicly available in the provided documents. Monitor for updates from official sources; no specifics on affected versions, impact, or remediation are provided here.

CVE-2001-0431

Vulnerability in iPlanet Web Server Enterprise Edition 4.x...

CVE-2001-0419

Buffer overflow in shared library ndwfn4.so for iPlanet Web Server iWS 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attackers to execute arbitrary commands via a long HTTP request that is passed to the application server, such as /jsp/...

CVE-2001-0419

CVE-2001-0419 describes a buffer overflow in the shared library ndwfn4.so used by iPlanet Web Server 4.1 when acting as a web listener for Oracle Application Server 4.0.8.2. An attacker can trigger the overflow by sending a very long HTTP request (e.g., to /jsp/) to cause remote code execution on...

CVE-2001-0419: Undefined Security Weakness

Buffer overflow in shared library ndwfn4.so for iPlanet Web Server iWS 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attackers to execute arbitrary commands via a long HTTP request that is passed to the application server, such as /jsp/...

CVE-2001-0431: Undefined Security Weakness

Vulnerability in iPlanet Web Server Enterprise Edition 4.x...

Дырка в iPlanet (buffer overflow)

Специальным образом сконструированные заголовки HTTP-запроса приводят к отказу сервера...

Netscape Enterprise Server 4 Method and URI overflow

Digizen Security Group advisory, 2001 Netscape Enterprise Server 4 Method and URI overflow Systems affected: Netscape Enterprise Server 4/SP7 possibly 4/SP3-SP7 running on Windows NT and Win2k Risk: Denial of Service Date: 18 May 2001 Vendor Notified: 25 April 2001 Legal Notice: This Advisory is...

Netscape Enterprise Server 4.1 - HTTP Method Name Buffer Overflow

source: https://www.securityfocus.com/bid/6792/info It has been reported that iPlanet Web Server and Netscape Enterprise Server are prone to a remotely exploitable buffer overflow condition. This is due to insufficient bounds checking when handling HTTP requests. This condition is reportedly...

iPlanet - Netscape Enterprise Web Publisher Buffer Overflow

iPlanet – Netscape Enterprise Web Publisher Buffer Overflow Release Date: May 11, 2001 Severity: High Remote SYSTEM level code execution Systems Affected: Netscape Enterprise 4.1 and prior versions. Description: The Web Publisher feature in Netscape Enterprise 4.1 is vulnerable to a buffer...